Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/tMEfXNfONC5SEARcd0mFCFiFHkU.roa
File: tMEfXNfONC5SEARcd0mFCFiFHkU.roa (raw, json)
Hash identifier: O2epFkLmPtIo+HtlnB5XqqU1t8//wYQmnx47S9uf5hI=
Subject key identifier: B4:C1:1F:5C:D7:CE:34:2E:52:10:04:5C:77:49:85:08:58:85:1E:45
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 01856F949CAE7389CEBE05A90746481AF6DE
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/tMEfXNfONC5SEARcd0mFCFiFHkU.roa
Signing time: Sun 01 Jan 2023 23:04:48 +0000
ROA not before: Sun 01 Jan 2023 23:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43174
IP address blocks: 131.117.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9c:ae:73:89:ce:be:05:a9:07:46:48:1a:f6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Jan 1 23:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c11f5cd7ce342e5210045c7749850858851e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:9e:c0:f6:60:c2:73:32:71:d9:02:34:05:
08:bb:e9:dc:3a:f1:1a:20:29:c3:e0:15:5a:e8:37:
6b:8d:bd:c3:92:3a:e2:f9:33:0a:dd:c4:60:4b:00:
88:b5:0e:47:1e:90:04:7d:e8:01:cd:17:f4:03:d5:
7f:c4:d7:19:8f:96:58:56:b8:b7:50:5b:fc:10:f5:
d1:23:76:bd:36:1c:e8:f8:9b:6e:0c:2f:c0:25:81:
c0:30:ae:1c:61:ab:e2:09:24:d5:69:9f:4d:35:39:
84:b1:75:13:1b:2d:22:1d:f7:79:aa:8d:14:77:cc:
73:48:5a:8e:d1:2a:44:7a:09:ae:79:16:56:94:a7:
e9:40:85:68:f1:ca:7a:56:29:c2:a1:93:95:51:12:
1a:2e:0f:de:79:fe:b8:57:88:20:ce:22:3d:63:39:
7c:55:2e:a0:fc:4c:32:01:44:95:bd:b7:66:d0:b9:
58:75:1f:8a:97:09:65:87:82:71:c8:07:5c:d6:dd:
a3:ed:e5:c2:ca:0e:61:40:c1:34:2b:4b:09:86:f9:
45:07:f1:ff:b6:4e:ff:a7:c5:33:1c:85:a5:ca:fc:
ce:03:18:be:19:dc:ab:d6:50:74:97:1f:e3:af:1e:
e4:95:ab:70:0f:68:d7:a8:fb:f3:11:8c:cc:34:12:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:1F:5C:D7:CE:34:2E:52:10:04:5C:77:49:85:08:58:85:1E:45
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/tMEfXNfONC5SEARcd0mFCFiFHkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:35:17:7d:5a:9e:66:ba:17:b6:66:b9:9c:0b:14:90:df:cf:
6f:16:80:96:92:c6:ae:c2:8f:17:81:9e:88:67:e0:21:af:78:
d4:17:14:31:fa:45:34:8d:19:7b:6c:99:43:e3:ac:fa:23:73:
c4:81:ce:3e:ac:d2:e1:54:72:7c:bd:b8:d5:41:dd:b7:54:14:
79:dc:1b:65:2d:cd:8c:b7:bc:4f:fc:74:00:5c:9e:40:a1:1f:
9b:76:4a:0e:45:77:98:cf:5d:0e:41:42:d0:7e:f4:92:47:fe:
06:a6:f1:44:64:93:00:f4:91:d1:bb:28:76:79:d8:30:7e:7a:
ac:46:27:46:25:c6:6e:9b:78:e3:ad:98:c1:cf:82:67:8a:a4:
15:5a:59:eb:c3:77:b9:0e:7c:90:d5:85:0a:f7:89:e6:f6:27:
02:7b:13:c7:c5:41:a7:1d:ce:29:a0:ae:6e:02:39:da:8e:ab:
29:39:9c:79:0c:12:6f:77:76:2d:9e:00:33:39:5b:ba:3c:f3:
77:d9:05:a9:48:9e:f7:77:ef:db:b1:ae:ca:75:4a:4f:3e:8b:
86:d5:f1:f4:a0:82:d4:82:5c:16:1a:f3:9e:0c:db:e3:a5:ea:
a2:b0:f8:b4:2e:5a:4d:14:35:bd:6b:ce:0f:b8:a5:c9:dc:91:
a2:5c:4e:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlJyuc4nOvgWpB0ZIGvbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm
Mjc3OWEwHhcNMjMwMTAxMjMwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGMxMWY1Y2Q3Y2UzNDJlNTIxMDA0NWM3NzQ5ODUwODU4ODUxZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNCewPZgwnMycdkCNAUIu+ncOvEa
ICnD4BVa6Ddrjb3Dkjri+TMK3cRgSwCItQ5HHpAEfegBzRf0A9V/xNcZj5ZYVri3
UFv8EPXRI3a9Nhzo+JtuDC/AJYHAMK4cYaviCSTVaZ9NNTmEsXUTGy0iHfd5qo0U
d8xzSFqO0SpEegmueRZWlKfpQIVo8cp6VinCoZOVURIaLg/eef64V4ggziI9Yzl8
VS6g/EwyAUSVvbdm0LlYdR+Klwllh4JxyAdc1t2j7eXCyg5hQME0K0sJhvlFB/H/
tk7/p8UzHIWlyvzOAxi+Gdyr1lB0lx/jrx7klatwD2jXqPvzEYzMNBJrDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTBH1zXzjQuUhAEXHdJhQhYhR5FMB8GA1UdIwQY
MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt
YjM4ZDdmNzA5ZDcwLzEvdE1FZlhOZk9OQzVTRUFSY2QwbUZDRmlGSGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw
LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg3XIMA0G
CSqGSIb3DQEBCwUAA4IBAQALNRd9Wp5muhe2ZrmcCxSQ389vFoCWksauwo8XgZ6I
Z+Ahr3jUFxQx+kU0jRl7bJlD46z6I3PEgc4+rNLhVHJ8vbjVQd23VBR53BtlLc2M
t7xP/HQAXJ5AoR+bdkoORXeYz10OQULQfvSSR/4GpvFEZJMA9JHRuyh2edgwfnqs
RidGJcZum3jjrZjBz4JniqQVWlnrw3e5DnyQ1YUK94nm9icCexPHxUGnHc4poK5u
AjnajqspOZx5DBJvd3YtngAzOVu6PPN32QWpSJ73d+/bsa7KdUpPPouG1fH0oILU
glwWGvOeDNvjpeqisPi0LlpNFDW9a84PuKXJ3JGiXE5r
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:01 2024 by rpki-client on console-ams.rpki-client.org